Date: Sat, 14 Jun 2008 19:03:51 +0200 From: Patrick =?ISO-8859-15?Q?Lamaizi=E8re?= <patfbsd@davenulle.org> To: freebsd-hackers@freebsd.org Subject: Re: AMD Geode LX crypto accelerator (glxsb) Message-ID: <20080614190351.4ec7660d@baby-jane-lamaiziere-net.local> In-Reply-To: <20080606234135.46144207@baby-jane-lamaiziere-net.local> References: <20080606234135.46144207@baby-jane-lamaiziere-net.local>
next in thread | previous in thread | raw e-mail | index | archive | help
Le Fri, 6 Jun 2008 23:41:35 +0200, Patrick Lamaizière <patfbsd@davenulle.org> a écrit : Hello, > I'm trying to port the glxsb driver from OpenBSD to FreeBSD 7-STABLE > (via the NetBSD port). > " The glxsb driver supports the security block of the Geode LX > series processors. The Geode LX is a member of the AMD Geode family > of integrated x86 system chips. > > Driven by periodic checks for available data from the generator, > glxsb supplies entropy to the random(4) driver for common usage. > > glxsb also supports acceleration of AES-128-CBC operations for > crypto(4)." I'm still working on it. I think it is ok now : - The random number generator feeds random(4) with entropy via random_harvest(9) - I added hmac software encryptions to be able to use the driver with ipsec(4). Most of the code is stolen from padlock(4), it is not easy to use the same code as OpenBSD : they use some code from crytosoft but in FreeBSD this code is private to the module. And the code of padlock is more "human readable", I think. - I reworked the sessions to use a TAILQ like padlock. - I added few sysctl for debugging purposes. I tested with openssl, and ipsec with all hmac supported by the driver. Seems good, but i'm not able to benchmark ipsec. Sources (7-STABLE): http://user.lamaiziere.net/patrick/glxsb-140608.tar.gz (Yes this is the good version!) If you can test it and provide some review it would be nice. Thanks, regards.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080614190351.4ec7660d>